Create an Account
Create an account for powerful AI tools, award-winning courses, and access to our vibrant community.
or
Already have an account?
Create an account for powerful AI tools, award-winning courses, and access to our vibrant community.
Already have an account?
Join 250,000+ professionals and teams at Microsoft, Shopify, and even NASA. đ
Already have an account? Login
Find the best remote jobs. Answer a few questions and we'll deploy a powerful assistant to help you search, create alerts, and more.
1 What roles are you open to?
2 Experience level
3 Work style
Did you know? If memory is enabled, Writing.io can remember your job search preferences and help you to improve your resume, craft customized outreach and more.
Category
Senior engineer designs and implements security assurance practices, testing, and controls for observability platform infrastructure and systems.
Manages ServiceNow's compliance certifications, maintains third-party assurance programs, and drives security controls testing across the organization.
It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could do that for everyoneâfreeing people from busywork so they could focus on meaningful work. Today, ServiceNow is the AI control tower for business reinvention. Our ServiceNow AI platform brings together any AI, any data, and any workflowâ helping 85% of the Fortune 500Âź work smarter, faster, and better. Weâre building an AI-native culture where technology and talent are unstoppable together. And weâre just getting started.
Join us to put AI to work for people.
The ServiceNow Security Organization (SSO)
The ServiceNow Security Organization (SSO) delivers world-class, innovative security solutions to reduce risk and protect the company and our customers. We enable our customers to migrate their most sensitive data and workloads to the cloud, accelerating our business so that we are the most trusted SaaS provider. We create an environment where our employees are proud to work and can make a positive impact
The Staff Compliance Analyst will be responsible for contributing to and executing on the Certification strategy as defined by Security Compliance leadership. This consists of maintaining existing third-party assurance programs already held by ServiceNow, as well as driving the analysis and adoption of new programs as directed by ServiceNow leadership. This role will work collaboratively with members of the Sales, Security, and Operations teams.
This role will also effectively monitor ServiceNowâs controls by understanding intent, and implementation of controls, as well as drive changes within the organization through effective testing. The successful candidate must be reliable, resourceful and have a âcan-doâ attitude.
What you get to do in this role:
Weâre looking for a highly motivated, collaborative and technically experienced Staff Compliance Analyst with ability to understand and influence cloud operational and security processes, effectively communicate ServiceNowâs controls including intent, and drive changes within the organization through effective testing, and bring an understanding of how to effectively leverage AI to scale compliance for the future. The successful candidate must be reliable, resourceful and have a âcan-doâ attitude.
You will be a key member of our team and play an important role in defining the Security and Compliance framework for a leading cloud company. In this role you will be required to demonstrate ability to analyse difficult problems, think out-of-box and provide pragmatic solutions and recommendations.
ServiceNow current compliance initiatives are focused on, but not limited regional programs such as Spanish ENS, French HDS, Italy QC2, UK Cyber Essentials Plus, and a deep understanding and experience with global programs such as ISO 27001, ISO 27018, PCI, and SOC 2. The Senior Cyber Security Compliance Analyst will be involved in driving and measuring compliance for the cloud business systems, control areas, process, and product for company compliance initiatives.
Responsibilities:
Qualifications
#SecurityJobs
Work Personas
We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service.
Equal Opportunity Employer
ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.
Accommodations
We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact [email protected] for assistance.
Export Control Regulations
For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.
From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license.
Investigates security incidents, builds detection tooling, reviews application/infrastructure security, and mitigates risks across hosting infrastructure.
Why work for DreamHost?
We help people own their digital presence. Itâs not just wishful thinking. Itâs our noble cause â an idea that drives everything we do.
When you put your dreams onlineâyour words, your photos, your creationsâyou shouldnât have to worry about your service provider mining that data for marketing purposes. Those are your dreams â not ours! DreamHostâs open platform gives you the power to share your data and the freedom to control how itâs used.
Working for DreamHost you can be a steward of your own career. We invest in our people, we promote from within the organization when possible and we offer extensive training to aid in your success. In this role, we offer competitive salary, health, vision, and dental insurance, as well as a company-issued laptop, 401k, opportunities for growth, and much much more! We are proud to be a US employer with a fantastic culture and the ability to offer so much to our employees.
Full health/vision/dental for the entire family at zero cost to team member
3% Safe Harbor contributed to 401(k) plus up to 1% employer match
Opportunities for profit sharing and bonuses
Generous time-off (starting at 15 vacation days)
11 Paid holidays (Technical Support and Technical Operations use a floating holiday policy)
Paid sick leave (80 hours accrued)
Tuition reimbursement (50â50 up to a specific amount)
Pet Insurance
Thrive Pass wellness allowance of $30 per month
Udemy online learning courses
Disability Insurance
Generous maternity/paternity leave
Discounted personal travel through corporate booking program Egencia
Laid-back atmosphere
Fun monthly company events
Free web hosting
The Security Engineer II is responsible for protecting DreamHost, our infrastructure, and our customers in a large, multi-tenant Linux hosting environment where untrusted code runs on our machines by design. This is a hands-on engineering role. You will investigate live compromises, build the tooling and detections that find the next one, review the security of our own applications and infrastructure, and drive down long-standing risk across a fleet spanning shared hosting, VPS, managed WordPress, dedicated servers, cloud, and email.
You will work on a small security team where everyone owns real workstreams end to end, partners directly with Systems, Development, Abuse, and Support, and is expected to exercise judgment without waiting for permission.
What youâll work on
Incident response across shared, virtualized, and dedicated Linux hosts â compromise investigation, blast-radius scoping, containment, evidence preservation, and write-ups.
Detection engineering: malware and webshell signatures, log-based detections, and reducing the false positives that create alert fatigue at fleet scale.
Application security review of our in-house control plane, customer panel, and internal tooling, plus the third-party and open-source code we depend on.
Secrets management modernization such as moving static credentials into Vault, adopting dynamic credentials, and eliminating plaintext secrets from code, logs, and CI.
Identity and access lifecycle: directory and SSO migration, privileged access review, and durable offboarding.
Vulnerability management and patch velocity across a large, heterogeneous fleet, including end-of-life OS and runtime remediation.
Automation. Anything done manually more than twice is a candidate for tooling, and youâll build it.
Security review and governance of AI and agent tooling as itâs adopted internally â data exposure, permission scope, agent identity, and abuse paths. Youâll also be using these tools heavily yourself; the team runs on them.
Responsibilities
Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the role.
Lead investigation and resolution of complex security incidents, coordinating across teams and communicating status clearly while facts are still incomplete.
Design and implement safeguards protecting customer sites, accounts, and infrastructure from active and evolving threats.
Conduct vulnerability assessments, security reviews, and risk analysis, with remediation guidance engineers can act on.
Build automation and tooling that improves detection, monitoring, response, and operational safety.
Partner with Systems, Development, Abuse, and Support to get security controls implemented rather than merely recommended.
Mentor less experienced team members and contribute to the teamâs shared knowledge and runbooks.
Contribute to security policy, standards, and process, and support compliance efforts without mistaking compliance for security.
3â6 years in security engineering, incident response, application security, offensive security, or systems administration, with demonstrated ability to resolve complex security problems independently.
Depth in at least one of: application security, incident response and detection engineering, or offensive security and penetration testing plus working competence in the other two.
Strong hands-on Linux (Debian/Ubuntu preferred), including low-level concepts: processes, namespaces, capabilities, filesystems, kernels, and how things actually break.
Experience operating long-lived production systems that canât simply be rebuilt including repairing hosts in place, under load, with real users on them.
Experience in multi-tenant or customer-facing environments where users are untrusted.
Scripting and automation youâve shipped and operated in production. Python, Go, Bash, Perl, or similar. We care that youâve built and maintained real tooling, not which language.
Log analysis and investigation at scale, and comfort with intrusion detection and web application firewalls (mod_security or similar).
Working knowledge of cloud platform security (AWS, GCP, Azure, or OpenStack) including IAM, network controls, and workload isolation.
Familiarity with secrets management and CI/CD security (Vault or equivalent, pipeline hardening, dependency and supply-chain risk).
Version control and infrastructure-as-code fluency (Git, Ansible or similar).
Practical, current fluency with AI tooling in your own work. You use it daily, you know where it fails, and you can say what you donât let it do. We are not looking for enthusiasm or for resistance, but for someone who has integrated these tools into real engineering work and formed opinions from experience.
Clear written and verbal communication, including translating technical risk for non-technical stakeholders.
A strong sense of ethics, healthy skepticism, and the patience to stay useful under pressure.
Nice to have
Web hosting or WordPress-at-scale experience, as a provider or a customer.
Container and orchestration security (Podman, Docker, Kubernetes) including escape and isolation failure modes.
Malware analysis, YARA rule authorship, or reverse engineering.
Detection-as-code or SIEM engineering experience.
Hands-on experience securing AI/LLM systems, agent frameworks, or MCP tooling. Prompt injection, tool-permission scoping, or data-boundary work.
Familiarity with PCI DSS, SOC 2, or ISO 27001 â as context, not as a career.
Open source contributions.
Compensation
**DreamHost provides equal employment opportunities to all team members and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.**
GRC specialist manages information security governance, risk assessments, compliance audits, and data privacy controls across the organization.
Evolution ir daudznacionÄls uzĆÄmums tieĆĄsaistes spÄÄŒu industrijas priekĆĄgalÄ. Mums ir plaĆĄa pieredze pirmajÄ vietÄ un vienmÄr meklÄjam lieliskus cilvÄkus, kas palÄ«dzÄtu mums izveidot nÄkamo lielo produktu hitu. MĆ«su komanda, kurÄ ir vairÄk nekÄ 1000 inĆŸenieru, darbojas no 8 inĆŸeniertehniskajiem centriem, kas darbojas 24/7/365, lai apkalpotu lietotÄjus visÄ pasaulÄ. Tas tiek palaists, izmantojot modernu programmatĆ«ras steku, kas atbalsta vairÄk nekÄ 250 pilnÄ«gi automatizÄtus izlaidumus mÄnesÄ« mĆ«su galvenajai tieĆĄraides videi. MÄs ticam iekĆĄÄjai kompetencei un veikliem darba procesiem, lai mÄs varÄtu Ä«stenot savu inĆŸenierijas misiju: nevainojama spÄlÄtÄja pieredze.
---ââââââââââââââââââââââââ
Evolution is a multinational business at the forefront of the online gaming industry. We have an extensive track record of number 1s and are always looking for great people to help us create the next big product hit. Our team of 1,000+ engineers operates out of 8 engineering hubs running code 24/7/365 to serve users around the world. This is run through a modern software stack supporting over 250 fully automated releases per month to our main live environment. We believe in building in-house competence and agile work processes so that we can deliver on our Engineering mission:Â A flawless player experience.
At Evolution, youâll work with IT, Legal and business colleagues to assess risks, support audits and help build security and privacy controls into everyday processes.
Joining our Information Security team and reporting to the GRC Manager, youâll contribute across governance, risk and compliance while developing your expertise in data privacy. This role offers room to grow, whether your experience is mainly in GRC or combines privacy work with a foundation in information security.
What you will do
What we are looking for
It would be a plus if you have
We offer
---ââââââââââââââââââââââââââââââââââââ-
Darba apraksts
Evolution komandÄ Tu sadarbosies ar IT speciÄlistiem, juridisko un biznesa struktĆ«rvienÄ«bu kolÄÄŁiem, lai izvÄrtÄtu riskus, atbalstÄ«tu auditu norisi un palÄ«dzÄtu ieviest droĆĄÄ«bas un privÄtuma aizsardzÄ«bas pasÄkumus ikdienas procesos.
Pievienojoties InformÄcijas droĆĄÄ«bas komandai, Tu strÄdÄsi GRC vadÄ«tÄja pakÄŒautÄ«bÄ un iesaistÄ«sies pÄrvaldÄ«bas, risku vadÄ«bas un atbilstÄ«bas (GRC) procesos. Ć ajÄ amatÄ varÄsi pilnveidot savas prasmes neatkarÄ«gi no tÄ, vai Tava lÄ«dzĆĄinÄjÄ pieredze galvenokÄrt saistÄ«ta ar GRC vai ar personas datu aizsardzÄ«bu apvienojumÄ ar zinÄĆĄanÄm informÄcijas droĆĄÄ«bÄ.
Tavi pienÄkumi
Ko mÄs sagaidÄm
Par priekƥrocību uzskatīsim
MÄs piedÄvÄjam
Staff Compliance Analyst maintains third-party security certifications, monitors organizational controls, and drives compliance testing and adoption across ServiceNow.
It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could do that for everyoneâfreeing people from busywork so they could focus on meaningful work. Today, ServiceNow is the AI control tower for business reinvention. Our ServiceNow AI platform brings together any AI, any data, and any workflowâ helping 85% of the Fortune 500Âź work smarter, faster, and better. Weâre building an AI-native culture where technology and talent are unstoppable together. And weâre just getting started.
Join us to put AI to work for people.
The ServiceNow Security Organization (SSO)
The ServiceNow Security Organization (SSO) delivers world-class, innovative security solutions to reduce risk and protect the company and our customers. We enable our customers to migrate their most sensitive data and workloads to the cloud, accelerating our business so that we are the most trusted SaaS provider. We create an environment where our employees are proud to work and can make a positive impact
The Staff Compliance Analyst will be responsible for contributing to and executing on the Certification strategy as defined by Security Compliance leadership. This consists of maintaining existing third-party assurance programs already held by ServiceNow, as well as driving the analysis and adoption of new programs as directed by ServiceNow leadership. This role will work collaboratively with members of the Sales, Security, and Operations teams.
This role will also effectively monitor ServiceNowâs controls by understanding intent, and implementation of controls, as well as drive changes within the organization through effective testing. The successful candidate must be reliable, resourceful and have a âcan-doâ attitude.
What you get to do in this role:
Weâre looking for a highly motivated, collaborative and technically experienced Staff Compliance Analyst with ability to understand and influence cloud operational and security processes, effectively communicate ServiceNowâs controls including intent, and drive changes within the organization through effective testing, and bring an understanding of how to effectively leverage AI to scale compliance for the future. The successful candidate must be reliable, resourceful and have a âcan-doâ attitude.
You will be a key member of our team and play an important role in defining the Security and Compliance framework for a leading cloud company. In this role you will be required to demonstrate ability to analyse difficult problems, think out-of-box and provide pragmatic solutions and recommendations.
ServiceNow current compliance initiatives are focused on, but not limited regional programs such as Spanish ENS, French HDS, Italy QC2, UK Cyber Essentials Plus, and a deep understanding and experience with global programs such as ISO 27001, ISO 27018, PCI, and SOC 2. The Senior Cyber Security Compliance Analyst will be involved in driving and measuring compliance for the cloud business systems, control areas, process, and product for company compliance initiatives.
Responsibilities:
Qualifications
#SecurityJobs
Work Personas
We approach our distributed world of work with flexibility and trust. Work personas (flexible, remote, or required in office) are categories that are assigned to ServiceNow employees depending on the nature of their work and their assigned work location. Learn more here. To determine eligibility for a work persona, ServiceNow may confirm the distance between your primary residence and the closest ServiceNow office using a third-party service.
Equal Opportunity Employer
ServiceNow is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, age, disability, gender identity, veteran status, or any other category protected by law. In addition, all qualified applicants with arrest or conviction records will be considered for employment in accordance with legal requirements.
Accommodations
We strive to create an accessible and inclusive experience for all candidates. If you require a reasonable accommodation to complete any part of the application process, or are unable to use this online application and need an alternative method to apply, please contact [email protected] for assistance.
Export Control Regulations
For positions requiring access to controlled technology subject to export control regulations, including the U.S. Export Administration Regulations (EAR), ServiceNow may be required to obtain export control approval from government authorities for certain individuals. All employment is contingent upon ServiceNow obtaining any export license or other approval that may be required by relevant export control authorities.
From Fortune. ©2026 Fortune Media IP Limited. All rights reserved. Used under license.
Investigates security compromises, builds detection tooling, reviews application/infrastructure security, and reduces risk across a multi-tenant Linux hosting environment.
Why work for DreamHost?
We help people own their digital presence. Itâs not just wishful thinking. Itâs our noble cause â an idea that drives everything we do.
When you put your dreams onlineâyour words, your photos, your creationsâyou shouldnât have to worry about your service provider mining that data for marketing purposes. Those are your dreams â not ours! DreamHostâs open platform gives you the power to share your data and the freedom to control how itâs used.
Working for DreamHost you can be a steward of your own career. We invest in our people, we promote from within the organization when possible and we offer extensive training to aid in your success. In this role, we offer competitive salary, health, vision, and dental insurance, as well as a company-issued laptop, 401k, opportunities for growth, and much much more! We are proud to be a US employer with a fantastic culture and the ability to offer so much to our employees.
Full health/vision/dental for the entire family at zero cost to team member
3% Safe Harbor contributed to 401(k) plus up to 1% employer match
Opportunities for profit sharing and bonuses
Generous time-off (starting at 15 vacation days)
11 Paid holidays (Technical Support and Technical Operations use a floating holiday policy)
Paid sick leave (80 hours accrued)
Tuition reimbursement (50â50 up to a specific amount)
Pet Insurance
Thrive Pass wellness allowance of $30 per month
Udemy online learning courses
Disability Insurance
Generous maternity/paternity leave
Discounted personal travel through corporate booking program Egencia
Laid-back atmosphere
Fun monthly company events
Free web hosting
The Security Engineer II is responsible for protecting DreamHost, our infrastructure, and our customers in a large, multi-tenant Linux hosting environment where untrusted code runs on our machines by design. This is a hands-on engineering role. You will investigate live compromises, build the tooling and detections that find the next one, review the security of our own applications and infrastructure, and drive down long-standing risk across a fleet spanning shared hosting, VPS, managed WordPress, dedicated servers, cloud, and email.
You will work on a small security team where everyone owns real workstreams end to end, partners directly with Systems, Development, Abuse, and Support, and is expected to exercise judgment without waiting for permission.
What youâll work on
Incident response across shared, virtualized, and dedicated Linux hosts â compromise investigation, blast-radius scoping, containment, evidence preservation, and write-ups.
Detection engineering: malware and webshell signatures, log-based detections, and reducing the false positives that create alert fatigue at fleet scale.
Application security review of our in-house control plane, customer panel, and internal tooling, plus the third-party and open-source code we depend on.
Secrets management modernization such as moving static credentials into Vault, adopting dynamic credentials, and eliminating plaintext secrets from code, logs, and CI.
Identity and access lifecycle: directory and SSO migration, privileged access review, and durable offboarding.
Vulnerability management and patch velocity across a large, heterogeneous fleet, including end-of-life OS and runtime remediation.
Automation. Anything done manually more than twice is a candidate for tooling, and youâll build it.
Security review and governance of AI and agent tooling as itâs adopted internally â data exposure, permission scope, agent identity, and abuse paths. Youâll also be using these tools heavily yourself; the team runs on them.
Responsibilities
Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the role.
Lead investigation and resolution of complex security incidents, coordinating across teams and communicating status clearly while facts are still incomplete.
Design and implement safeguards protecting customer sites, accounts, and infrastructure from active and evolving threats.
Conduct vulnerability assessments, security reviews, and risk analysis, with remediation guidance engineers can act on.
Build automation and tooling that improves detection, monitoring, response, and operational safety.
Partner with Systems, Development, Abuse, and Support to get security controls implemented rather than merely recommended.
Mentor less experienced team members and contribute to the teamâs shared knowledge and runbooks.
Contribute to security policy, standards, and process, and support compliance efforts without mistaking compliance for security.
3â6 years in security engineering, incident response, application security, offensive security, or systems administration, with demonstrated ability to resolve complex security problems independently.
Depth in at least one of: application security, incident response and detection engineering, or offensive security and penetration testing plus working competence in the other two.
Strong hands-on Linux (Debian/Ubuntu preferred), including low-level concepts: processes, namespaces, capabilities, filesystems, kernels, and how things actually break.
Experience operating long-lived production systems that canât simply be rebuilt including repairing hosts in place, under load, with real users on them.
Experience in multi-tenant or customer-facing environments where users are untrusted.
Scripting and automation youâve shipped and operated in production. Python, Go, Bash, Perl, or similar. We care that youâve built and maintained real tooling, not which language.
Log analysis and investigation at scale, and comfort with intrusion detection and web application firewalls (mod_security or similar).
Working knowledge of cloud platform security (AWS, GCP, Azure, or OpenStack) including IAM, network controls, and workload isolation.
Familiarity with secrets management and CI/CD security (Vault or equivalent, pipeline hardening, dependency and supply-chain risk).
Version control and infrastructure-as-code fluency (Git, Ansible or similar).
Practical, current fluency with AI tooling in your own work. You use it daily, you know where it fails, and you can say what you donât let it do. We are not looking for enthusiasm or for resistance, but for someone who has integrated these tools into real engineering work and formed opinions from experience.
Clear written and verbal communication, including translating technical risk for non-technical stakeholders.
A strong sense of ethics, healthy skepticism, and the patience to stay useful under pressure.
Nice to have
Web hosting or WordPress-at-scale experience, as a provider or a customer.
Container and orchestration security (Podman, Docker, Kubernetes) including escape and isolation failure modes.
Malware analysis, YARA rule authorship, or reverse engineering.
Detection-as-code or SIEM engineering experience.
Hands-on experience securing AI/LLM systems, agent frameworks, or MCP tooling. Prompt injection, tool-permission scoping, or data-boundary work.
Familiarity with PCI DSS, SOC 2, or ISO 27001 â as context, not as a career.
Open source contributions.
Compensation
**DreamHost provides equal employment opportunities to all team members and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.**
Manages cybersecurity risk assessment, remediation tracking, and risk reporting programs across the organization, coordinating with cross-functional teams to maintain risk posture.
The Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our assets, provides awareness education to teams on security best practices for data protection, and ensures data governance and data sharing relationships with third parties in order to securely protect Rubrik information.
We are looking for a Manager, CyberSecurity Risk Management to join our security risk management team and support the delivery of Rubrikâs cybersecurity risk management program. Working closely with the teamâs lead Program Manager, who owns the program, you will help drive day-to-day execution: coordinating cross-functional risk assessments, supporting risk review and acceptance processes, tracking risk remediation to closure, and producing risk reporting that gives leadership a clear view of Rubrikâs cybersecurity risk posture. You will partner with Security, Engineering, Product, IT, Legal, Procurement, and Finance to keep work on track and deliver measurable outcomes. Success in this role requires strong program management discipline, solid risk and compliance knowledge, and the ability to influence and build consensus at every level of the company.
#LI-remote
The minimum and maximum base salaries for this role are posted below; additionally, the role is eligible for bonus potential, equity and benefits. The range displayed reflects the minimum and maximum target for new hire salaries for the role based on U.S. location. Within the range, the salary offered will be determined by work location and additional factors, including job-related skills, experience, and relevant education or training.
US (SF Bay Area, DC Metro, NYC, Seattle) Pay Range
$181,600â$272,400 USD
The minimum and maximum base salaries for this role are posted below; additionally, the role is eligible for bonus potential, equity and benefits. The range displayed reflects the minimum and maximum target for new hire salaries for the role based on U.S. location. Within the range, the salary offered will be determined by work location and additional factors, including job-related skills, experience, and relevant education or training.
US2 (all other US offices/remote) Pay Range
$163,400â$245,200 USD
Rubrik (RBRK), the Security and AI Operations Company, leads at the intersection of data protection, cyber resilience, and enterprise AI acceleration. Rubrik Security Cloud delivers complete cyber resilience by securing, monitoring, and recovering data, identities, and workloads across clouds. Rubrik Agent Cloud accelerates trusted AI agent deployments at scale by monitoring and auditing agentic actions, enforcing real-time guardrails, fine-tuning for accuracy and undoing agentic mistakes.
Linkedin | X (formerly Twitter) | Instagram |Â Rubrik.com
At Rubrik, we are dedicated to fostering a culture where people from all backgrounds are valued, feel they belong, and believe they can succeed. Our commitment to inclusion is at the heart of our mission to secure the worldâs data.
Our goal is to hire and promote the best talent, regardless of background. We continually review our hiring practices to ensure fairness and strive to create an environment where every employee has equal access to opportunities for growth and excellence. We believe in empowering everyone to bring their authentic selves to work and achieve their fullest potential.
Our Company: We are committed to building a merit-based organization that offers equal access to growth and success for all employees globally. Your potential is limitless here.
Our Culture: We strive to create an inclusive atmosphere where individuals from all backgrounds feel a strong sense of belonging, can thrive, and do their best work. Your contributions help us innovate and break boundaries.
Our Communities: We are dedicated to expanding our engagement with the communities we operate in, creating opportunities for underrepresented talent and driving greater innovation for our clients. Your impact extends beyond Rubrik, contributing to safer and stronger communities.
Rubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, protected veteran status, or any other status protected by applicable law. Rubrik provides equal employment opportunities to employees and applicants in all terms and conditions of employment, including recruiting, hiring, promotion, compensation, training, leave, and termination.
Rubrik provides reasonable accommodations to qualified applicants and employees with disabilities in accordance with applicable law. If you need an accommodation to participate in the application process or to perform your job, please contact hr@rubrik.com. Accommodations may include changes to the application process, documents in an alternate format, a sign language interpreter, or specialized equipment.
EEO IS THE LAW
NOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS
Investigates security compromises, builds detection tooling, reviews application/infrastructure security, and mitigates risks across DreamHost's multi-tenant hosting environment.
Why work for DreamHost?
We help people own their digital presence. Itâs not just wishful thinking. Itâs our noble cause â an idea that drives everything we do.
When you put your dreams onlineâyour words, your photos, your creationsâyou shouldnât have to worry about your service provider mining that data for marketing purposes. Those are your dreams â not ours! DreamHostâs open platform gives you the power to share your data and the freedom to control how itâs used.
Working for DreamHost you can be a steward of your own career. We invest in our people, we promote from within the organization when possible and we offer extensive training to aid in your success. In this role, we offer competitive salary, health, vision, and dental insurance, as well as a company-issued laptop, 401k, opportunities for growth, and much much more! We are proud to be a US employer with a fantastic culture and the ability to offer so much to our employees.
Full health/vision/dental for the entire family at zero cost to team member
3% Safe Harbor contributed to 401(k) plus up to 1% employer match
Opportunities for profit sharing and bonuses
Generous time-off (starting at 15 vacation days)
11 Paid holidays (Technical Support and Technical Operations use a floating holiday policy)
Paid sick leave (80 hours accrued)
Tuition reimbursement (50â50 up to a specific amount)
Pet Insurance
Thrive Pass wellness allowance of $30 per month
Udemy online learning courses
Disability Insurance
Generous maternity/paternity leave
Discounted personal travel through corporate booking program Egencia
Laid-back atmosphere
Fun monthly company events
Free web hosting
The Security Engineer II is responsible for protecting DreamHost, our infrastructure, and our customers in a large, multi-tenant Linux hosting environment where untrusted code runs on our machines by design. This is a hands-on engineering role. You will investigate live compromises, build the tooling and detections that find the next one, review the security of our own applications and infrastructure, and drive down long-standing risk across a fleet spanning shared hosting, VPS, managed WordPress, dedicated servers, cloud, and email.
You will work on a small security team where everyone owns real workstreams end to end, partners directly with Systems, Development, Abuse, and Support, and is expected to exercise judgment without waiting for permission.
What youâll work on
Incident response across shared, virtualized, and dedicated Linux hosts â compromise investigation, blast-radius scoping, containment, evidence preservation, and write-ups.
Detection engineering: malware and webshell signatures, log-based detections, and reducing the false positives that create alert fatigue at fleet scale.
Application security review of our in-house control plane, customer panel, and internal tooling, plus the third-party and open-source code we depend on.
Secrets management modernization such as moving static credentials into Vault, adopting dynamic credentials, and eliminating plaintext secrets from code, logs, and CI.
Identity and access lifecycle: directory and SSO migration, privileged access review, and durable offboarding.
Vulnerability management and patch velocity across a large, heterogeneous fleet, including end-of-life OS and runtime remediation.
Automation. Anything done manually more than twice is a candidate for tooling, and youâll build it.
Security review and governance of AI and agent tooling as itâs adopted internally â data exposure, permission scope, agent identity, and abuse paths. Youâll also be using these tools heavily yourself; the team runs on them.
Responsibilities
Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of the role.
Lead investigation and resolution of complex security incidents, coordinating across teams and communicating status clearly while facts are still incomplete.
Design and implement safeguards protecting customer sites, accounts, and infrastructure from active and evolving threats.
Conduct vulnerability assessments, security reviews, and risk analysis, with remediation guidance engineers can act on.
Build automation and tooling that improves detection, monitoring, response, and operational safety.
Partner with Systems, Development, Abuse, and Support to get security controls implemented rather than merely recommended.
Mentor less experienced team members and contribute to the teamâs shared knowledge and runbooks.
Contribute to security policy, standards, and process, and support compliance efforts without mistaking compliance for security.
3â6 years in security engineering, incident response, application security, offensive security, or systems administration, with demonstrated ability to resolve complex security problems independently.
Depth in at least one of: application security, incident response and detection engineering, or offensive security and penetration testing plus working competence in the other two.
Strong hands-on Linux (Debian/Ubuntu preferred), including low-level concepts: processes, namespaces, capabilities, filesystems, kernels, and how things actually break.
Experience operating long-lived production systems that canât simply be rebuilt including repairing hosts in place, under load, with real users on them.
Experience in multi-tenant or customer-facing environments where users are untrusted.
Scripting and automation youâve shipped and operated in production. Python, Go, Bash, Perl, or similar. We care that youâve built and maintained real tooling, not which language.
Log analysis and investigation at scale, and comfort with intrusion detection and web application firewalls (mod_security or similar).
Working knowledge of cloud platform security (AWS, GCP, Azure, or OpenStack) including IAM, network controls, and workload isolation.
Familiarity with secrets management and CI/CD security (Vault or equivalent, pipeline hardening, dependency and supply-chain risk).
Version control and infrastructure-as-code fluency (Git, Ansible or similar).
Practical, current fluency with AI tooling in your own work. You use it daily, you know where it fails, and you can say what you donât let it do. We are not looking for enthusiasm or for resistance, but for someone who has integrated these tools into real engineering work and formed opinions from experience.
Clear written and verbal communication, including translating technical risk for non-technical stakeholders.
A strong sense of ethics, healthy skepticism, and the patience to stay useful under pressure.
Nice to have
Web hosting or WordPress-at-scale experience, as a provider or a customer.
Container and orchestration security (Podman, Docker, Kubernetes) including escape and isolation failure modes.
Malware analysis, YARA rule authorship, or reverse engineering.
Detection-as-code or SIEM engineering experience.
Hands-on experience securing AI/LLM systems, agent frameworks, or MCP tooling. Prompt injection, tool-permission scoping, or data-boundary work.
Familiarity with PCI DSS, SOC 2, or ISO 27001 â as context, not as a career.
Open source contributions.
Compensation
**DreamHost provides equal employment opportunities to all team members and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.**
GRC specialist manages governance, risk, and compliance activities including ISO 27001 audits, risk assessments, privacy impact assessments, and security policy maintenance.
Evolution ir daudznacionÄls uzĆÄmums tieĆĄsaistes spÄÄŒu industrijas priekĆĄgalÄ. Mums ir plaĆĄa pieredze pirmajÄ vietÄ un vienmÄr meklÄjam lieliskus cilvÄkus, kas palÄ«dzÄtu mums izveidot nÄkamo lielo produktu hitu. MĆ«su komanda, kurÄ ir vairÄk nekÄ 1000 inĆŸenieru, darbojas no 8 inĆŸeniertehniskajiem centriem, kas darbojas 24/7/365, lai apkalpotu lietotÄjus visÄ pasaulÄ. Tas tiek palaists, izmantojot modernu programmatĆ«ras steku, kas atbalsta vairÄk nekÄ 250 pilnÄ«gi automatizÄtus izlaidumus mÄnesÄ« mĆ«su galvenajai tieĆĄraides videi. MÄs ticam iekĆĄÄjai kompetencei un veikliem darba procesiem, lai mÄs varÄtu Ä«stenot savu inĆŸenierijas misiju: nevainojama spÄlÄtÄja pieredze.
---ââââââââââââââââââââââââ
Evolution is a multinational business at the forefront of the online gaming industry. We have an extensive track record of number 1s and are always looking for great people to help us create the next big product hit. Our team of 1,000+ engineers operates out of 8 engineering hubs running code 24/7/365 to serve users around the world. This is run through a modern software stack supporting over 250 fully automated releases per month to our main live environment. We believe in building in-house competence and agile work processes so that we can deliver on our Engineering mission:Â A flawless player experience.
At Evolution, youâll work with IT, Legal and business colleagues to assess risks, support audits and help build security and privacy controls into everyday processes.
Joining our Information Security team and reporting to the GRC Manager, youâll contribute across governance, risk and compliance while developing your expertise in data privacy. This role offers room to grow, whether your experience is mainly in GRC or combines privacy work with a foundation in information security.
What you will do
What we are looking for
It would be a plus if you have
We offer
---ââââââââââââââââââââââââââââââââââââ-
Darba apraksts
Evolution komandÄ Tu sadarbosies ar IT speciÄlistiem, juridisko un biznesa struktĆ«rvienÄ«bu kolÄÄŁiem, lai izvÄrtÄtu riskus, atbalstÄ«tu auditu norisi un palÄ«dzÄtu ieviest droĆĄÄ«bas un privÄtuma aizsardzÄ«bas pasÄkumus ikdienas procesos.
Pievienojoties InformÄcijas droĆĄÄ«bas komandai, Tu strÄdÄsi GRC vadÄ«tÄja pakÄŒautÄ«bÄ un iesaistÄ«sies pÄrvaldÄ«bas, risku vadÄ«bas un atbilstÄ«bas (GRC) procesos. Ć ajÄ amatÄ varÄsi pilnveidot savas prasmes neatkarÄ«gi no tÄ, vai Tava lÄ«dzĆĄinÄjÄ pieredze galvenokÄrt saistÄ«ta ar GRC vai ar personas datu aizsardzÄ«bu apvienojumÄ ar zinÄĆĄanÄm informÄcijas droĆĄÄ«bÄ.
Tavi pienÄkumi
Ko mÄs sagaidÄm
Par priekƥrocību uzskatīsim
MÄs piedÄvÄjam
Monitors security tools and analyzes alerts to detect malicious or anomalous activity on client networks.
Leads threat intelligence operations for blockchain hacks, coordinating incident response, analysis, and customer communications while building AI-powered detection systems.
Headquarters: United States
URL: https://www.trmlabs.com/
When a protocol is drained, or an exchange is compromised, our customers need to know within minutes or hours which addresses to block and where the funds are going. You will own TRM's answer to that, end-to-end.
As a Senior / Staff Threat Intelligence Analyst, you will lead TRM's hacks category: the metrics, the system that hits them, and the small contractor team that keeps it running around the clock. We align on the outcome; the approach is yours.
Take command when a big hack breaks and act as a leader. Run the response: triage, coordination across teams, internal and customer communications, and the incident report afterwards.
Get every major hack into TRM fast. Make sure every major hack is visible to customers within hours of the first credible public report, around the clock.
Keep TRM's hack data complete and accurate. Every hack, at any size, is recorded with its entity, theft addresses, date, amount, and hack type.
Follow the money at scale. Design the system, with our Data Science and engineering teams, that carries hack-specific attribution downstream as stolen funds move.
Build the machine with AI. Leverage AI to build the tools and agents to automate key parts of hacks analysis and response, while ensuring human quality control over every output.
Explain how it happened. Root-cause the most important hacks and publish best-in-industry technical analysis that makes TRM the first source cited.
See the next one coming. Build approaches that spot vulnerable contracts before they are exploited, and get them into our product.
5+ years of professional experience in blockchain intelligence, crypto investigations, cyber threat intelligence, incident response, or a closely related field.
Has owned incident response in a high-stakes environment (exchange, security firm, incident response, or CTI team): war rooms, incident reports, communications under pressure.
Strong blockchain tracing across major chains (BTC, EVM, TRON, Solana), including bridges, cross-chain swaps, and mixers.
Understands how DeFi, bridge, and exchange exploits work, and how attackers behave after the theft.
Applied AI fluency. We expect you to already be building AI-assisted or agentic workflows in your daily analytical work, to be able to show how you validate their outputs and where they fail, and to treat AI as a force multiplier.
Experience managing contractors or leading a small team.
Writes and briefs clearly, from technical deep-dives to executive summaries.
Hands-on and highly accountable: does the hardest work, not only coordinates it.
Smart-contract reverse-engineering (Solidity).
Experience at a security auditor or blockchain analytics firm.
Experience following specific well-known hacker groups.
The hacks function sits within TRM's Primary Intelligence organization, alongside the Facilitation & Money Laundering (F&ML) pod. You will work closely with the Nation States, Cyber Threat Intelligence, and Global Investigations teams, as well as with Data Science and Engineering on automation, and with Marketing on publications.
Monthly metrics review with your manager.
Weekly operating sync with your team.
Regular syncs with your team across time zones.
A war room, run by you, whenever a major hack breaks.
On-call responsibilities
If youâre interested in joining TRM, we encourage you to apply directly. Every application is reviewed by our Talent team.
Before applying, review the job description carefully and highlight the experience and impact that best demonstrate the required qualifications. Please also provide thoughtful and accurate answers to the application questions, as these will be used to evaluate your skills and qualifications for the role.
If you send your resume directly to someone at TRM, we canât guarantee it will reach the appropriate hiring team. Applying directly is the best way to ensure your application will be considered.
Our process is designed to understand how you think, solve problems, and deliver impact, while allowing you to evaluate TRM. Most interview processes include a case study, an AI skills assessment, and a Leadership Principles interview.
Recruiter Intro: Qualifications, motivations, and alignment with the role.
Hiring Manager: Deep dive into your relevant experience, skills, and impact.
First Round: 1â2 interviews focused on the skills most critical to the role.
Final Round: Hands-on case study. This is usually a panel-style session where we go deeper into your craft, problem-solving, and alignment with TRM.
References: Former colleagues who can provide insight into your work and impact.
Offer: Congrats! Your recruiter will present the offer and compensation details.
Welcome to TRM: We're excited to build a safer world with you!
Your recruiter will share your specific interview plan and preparation guidance along the way.
AI fluency is a baseline expectation at TRM.
We believe AI meaningfully changes how top performers operate. We expect every team member to use AI to accelerate and reimagine their craft, not just automate surface tasks.
At TRM, AI fluency means you are among the top 10 percent of operators in your function in how you apply AI to:
Accelerate repeatable workflows
Structure and solve problems
Improve output quality
Increase speed and leverage
You will be evaluated on applied AI fluency during the interview process.
We are building a safer world. That promise shows up in how we work every day.
TRM moves FAST. We are a high-velocity, high-ownership team that expects clarity, follow-through, and impact. People who thrive here are energized by hard problems, experimentation, and continuous feedback. If something takes months elsewhere, it will ship here in days.
Our work sits at the intersection of AI, national security, and fighting crime. The problems are complex, the stakes are real, and the environment evolves quickly. The pace and intensity of the work reflect the importance of the mission. As a result, the way we operate requires a high level of ownership, adaptability, collaboration, and creative problem-solving.
At TRM, you should expect:
Priorities and targets to change quickly
Operating with a high degree of ambiguity
A high level of personal ownership and accountability
Close collaboration across teams and functions
Frequent, high-touch communication
Creative problem-solving and out-of-the-box thinking
A pace that rewards urgency, adaptability, and outcomes
This environment is energizing for people who enjoy building, solving hard problems, and making progress in situations that are not always fully defined. It also requires thriving in ambiguity, adjusting course as new information emerges, and maintaining focus and positivity in a fast-moving and intense environment.
We also recognize that this style of operating is not for everyone. If you are primarily optimizing for predictability or a consistently balanced workload, we encourage you to use the interview process to pressure-test whether this environment is truly the right fit. We want teammates who thrive here, not just survive here.
If you are excited by meaningful problems, motivated by ambitious goals, and energized by working alongside mission-driven colleagues, there is a good chance you will find TRM to be an exceptional place to grow and contribute.
We hire and grow against three leadership principles. Theyâre the standards for how we operate, treat each other, and make decisions.
Impact-Oriented Trailblazer: We put customers first and move with speed, focus, and adaptability. We treat every plan like an experiment â test, ship, measure, and iterate quickly.
Master Craftsperson: We care deeply about our craft. We balance speed with high standards, own outcomes endâtoâend, and invest in getting better everyday.
Inspiring Colleague: We add clarity and energy, not noise. We bring humility, candor, and a oneâteam mindset â giving and receiving feedback to make the team stronger.
At TRM, we care deeply about our craft. We are looking for individuals who want their work to matter, who experiment with speed and rigor, and who take pride in building a safer world for billions of people. If youâre excited by TRMâs mission but donât check every box, we encourage you to apply â we hire for slope, judgment, and the will to learn fast.
TRM is a Series C company with $220M in total funding, backed by Goldman Sachs, Bessemer, Y Combinator, Thoma Bravo, and others. Headquartered in San Francisco, TRM operates as a distributed-first company with hubs in Los Angeles, San Francisco, New York, Washington D.C., London, and Singapore.
By submitting your application, you agree to allow TRM Labs to process your personal information in accordance with our Privacy Policy.
We collect the information you provide (such as your resume, work history, and contact details) solely for the purpose of evaluating your candidacy for current and future roles at TRM.
Because our hiring cycles for certain positions may span 24 to 36 months, we retain your personal information for up to 36 months from the date of your application. After that period, your data is deleted unless a different retention period is required or permitted by law.
If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with applicable data protection laws, you have the right to access, correct, or request deletion of your personal data at any time before that period ends. To exercise any of these rights, contact us at privacy@trmlabs.com.
To notify TRM Labs that you believe this job posting is non-compliant, please submit a report through this form(opens in a new tab). No response will be provided to inquiries unrelated to job posting compliance.
The use of AI tools of any kind (including but not limited to notetakers, interview assistants, and real-time coaching tools such as Otter.ai, Fireflies, Fathom, Cluey, or similar) during TRM interviews is not permitted without prior approval from TRM. TRM uses its own internal tools for note-taking to ensure a consistent and confidential experience for all candidates.
We are committed to providing reasonable accommodations to applicants with disabilities, and requests can be made via this form(opens in a new tab).
TRM Labs does not accept unsolicited agency resumes. Please do not forward resumes to TRM employees. TRM Labs is not responsible for any fees related to unsolicited resumes and will not pay fees to any third-party agency or company without a signed agreement.
To apply: https://weworkremotely.com/remote-jobs/trm-labs-senior-staff-threat-intelligence-analyst-hacks
Manages a red team that identifies critical security vulnerabilities and attack paths before adversaries exploit them.
Lead and manage a team of four security engineers while overseeing incident management, threat detection, SIEM optimization, and cloud security posture across AWS, Azure, and GCP.
We are seeking a proactive and experienced Lead Information Security Engineer to join our Information Security team. In this role, you will take ownership of incident management, threat detection, and the continuous improvement of our security posture, while leading and managing our team of four Information Security Engineers. You will be responsible for setting priorities, providing technical guidance, developing team capabilities, and ensuring the effective execution of our Security Operations strategy.
You will play a pivotal role in safeguarding Job&Talentâs systems, data, and operations, fostering a culture of security excellence, and ensuring our security capabilities evolve ahead of emerging threats. Combining hands-on technical expertise with people management, you will drive operational excellence, strengthen our detection and response capabilities, and collaborate closely with DevOps and other teams across the business.
This is a fully remote position with flexibility within ±1 hour of CET.
Team Leadership and Management: Lead and manage a team of four security professionals, providing direction, technical guidance, mentoring, and support to drive individual development and overall team performance.
SecOps and Threat Detection: Own and continuously improve incident management processes, ensuring effective investigation, response, and resolution of security incidents.
Detection and Response: Improve threat detection capabilities, optimize SIEM alerting to reduce noise and false positives, develop and maintain incident response playbooks, and strengthen email security.
Security Policies and Standards: Develop security guides and define, implement, and monitor security measures to protect Job&Talentâs systems, data, and operations.
Security Tooling and Processes: Drive the continuous improvement of security tools, processes, and standards to provide consistent security assurance across the business.
Cloud Security: Use our Cloud Security Posture Management (CSPM) tool to monitor and improve cloud security configurations across AWS, Azure, and Google Cloud Platform.
Cross-functional Collaboration: Work closely with DevOps teams to integrate security into cloud deployment environments, infrastructure, and CI/CD pipelines.
Risk Management: Perform risk assessments, threat modeling, and security reviews, ensuring risks are identified, prioritized, and addressed effectively.
Logging and Visibility: Improve logging, monitoring, visibility, and evidence collection across corporate and production systems.
Continuous Improvement: Establish best practices, identify opportunities to improve operational efficiency, and ensure the team continuously develops its technical capabilities in response to evolving threats.
5+ years of experience in SecOps, cloud security, incident response, security engineering, or a similar role.
Previous experience leading or managing a security team, including mentoring engineers, setting priorities, and coordinating workloads. Experience managing a team of a similar size is a plus.
At least 3 years of experience in threat analysis, SIEM alert investigation, detection engineering, noise reduction, and incident management.
At least 2 years of experience working with CSPM tools.
At least 3 years of experience working for a cloud-based, global technology product company.
Hands-on experience with EDR/XDR tools and endpoint investigation.
Experience with vulnerability management and risk-based prioritization.
Strong understanding of cloud security principles and experience working with AWS, Azure, and/or Google Cloud Platform.
Ability to combine hands-on technical expertise with team leadership, ensuring effective execution while supporting the development of team members.
Strong communication and collaboration skills, with the ability to work effectively with technical teams and stakeholders across the business.
About us
Job&Talent is a world-leading, AI-powered workforce management platform for frontline industries. We help companies boost productivity and efficiency at scale, while giving workers the tools they need to thrive. Our mission is simple: to empower the people who make the world go round.
Built on deep industry expertise, cutting-edge technology, and smart AI agents, our end-to-end platform covers the entire workforce lifecycle â from recruitment and planning to time and attendance, performance, cost management, and communication.
It delivers measurable improvements in the areas that matter most: fulfilment, attendance, retention, and workforce quality. Our platform strength is rooted in unique experience: placing millions of workers over the years and serving thousands of blue-chip clients across delivery, logistics, manufacturing, e-commerce, retail, and hospitality.
Headquartered in Madrid, the company operates in 10 countries across Europe, the US, and Latin America and is backed by leading investors including Atomico, Goldman Sachs, Kinnevik, BlackRock, and SoftBank.
Join our community and make an impact
Innovation, high standards, and analytical thinking are in our DNA. Everyone has a voice here, and that voice matters. Itâs how we stay sharp, move fast, and make decisions that keep us ahead of the curve.
Youâll take full ownership of your work, collaborate across borders, and grow by doing. Around here, youâll hear a lot about 10x experiences, human-centered design, and the power of AI. But what truly sets us apart is our people: Our diverse team brings unique perspectives, deep commitment and real-world experience to the table.
We champion empathy, honesty, and inclusion. Because when people can be their authentic selves, incredible things happenâfor our workers, our clients, and for each other.
And we reward that impactâwith competitive pay, meaningful benefits, and the opportunity to shape what work looks like for millions around the globe.
If youâre ready to make a real impact at scale, youâre in the right place.
Proud to champion equality
At Job&Talent we value diversity and weâre an Equal Opportunity Employer. We welcome applications from all suitably qualified people regardless of national origin, race, disability, religious beliefs or sexual orientation. Come join us. We look forward to your application.
#LI-ML2
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Monitors public sources and social media to investigate threats, fraud, safety risks, and persons of interest using OSINT techniques.
Are you interested in joining an organization with a global reach? In a world of shifting threats, Concentric is your trusted ally. Powered by elite professionals from military, government, and intelligence backgrounds. If you are passionate about intelligence, risk analysis, threat management, executive protection, security operations, or business resiliency, Concentric may be the organization youâve been searching for!
Concentric is a risk consultancy specializing in delivering strategic security and intelligence services. We provide holistic, intelligent security solutions for private clients and corporations globally. Concentric offers strategic advisory services, risk assessments, physical protection, threat intelligence, open-source monitoring, program audits, secure embedded staffing, and training for security teams and intelligence analysts.
Our ultimate goal is to be recognized as the most innovative, capable, and trusted Risk Management partner in the world, and we do this by following these core values:
Integrity â Collaboration - Relationships â Excellence â Creativity - Results
Join Us,
Concentric - âYour World Securedâ
We are currently looking to hire a Junior Open-Source Intelligence Analyst to join our team embedded with our client in Singapore!
*This is a full-time, remote position open to candidates based in Singapore. Applicants must be authorized to work in Singapore without employer sponsorship.
JOB DESCRIPTION
The Open-Source Intelligence (OSINT) Analyst will be responsible for monitoring all source information to proactively identify and assess risks and threats to the client, its hosts, and their guests. This position requires excellent communication skills and the ability to synthesize intelligence from multiple sources into products that clearly communicate risk and opportunity. âOpen source investigationâ includes ongoing, persistent monitoring for threats; person of interest (POI) investigations; and social media analysis. This position sits under the organizationâs Global Investigations (GI) program and within Fraud & Safety Operations, which drives proactive detection, investigation, and enforcement against organized platform abuse and severe safety threats.
RESPONSIBILITIES
REQUIRED QUALIFICATIONS
PREFERRED QUALIFICATIONS
COMPENSATION & BENEFITS
Singapore Pay Range
$75,000â$80,000 SGD
Concentric and SPS Global acknowledge the systemic barriers in the security industry and recognize that removing those barriers will require a collaborative and conscious effort. Concentric and SPS Global are committed to programs and initiatives that promote diversity, equity, and inclusion, enhancing our organization and the broader community. We are creating a diverse environment and are proud to be an equal opportunity employer. We encourage people from all backgrounds to apply. All qualified applicants will receive consideration for employment regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.
Concentric Advisors and SPS Global are committed to protecting the privacy and security of all applicants who submit personal information to us. You can access our GDPR and CCPA policy by clicking the GDPR button at the bottom of our career page.
Leads a security engineering team while managing incident response, threat detection, cloud security, risk assessments, and security operations improvements.
We are seeking a proactive and experienced Lead Information Security Engineer to join our Information Security team. In this role, you will take ownership of incident management, threat detection, and the continuous improvement of our security posture, while leading and managing our team of four Information Security Engineers. You will be responsible for setting priorities, providing technical guidance, developing team capabilities, and ensuring the effective execution of our Security Operations strategy.
You will play a pivotal role in safeguarding Job&Talentâs systems, data, and operations, fostering a culture of security excellence, and ensuring our security capabilities evolve ahead of emerging threats. Combining hands-on technical expertise with people management, you will drive operational excellence, strengthen our detection and response capabilities, and collaborate closely with DevOps and other teams across the business.
This is a fully remote position with flexibility within ±1 hour of CET.
Team Leadership and Management: Lead and manage a team of four security professionals, providing direction, technical guidance, mentoring, and support to drive individual development and overall team performance.
SecOps and Threat Detection: Own and continuously improve incident management processes, ensuring effective investigation, response, and resolution of security incidents.
Detection and Response: Improve threat detection capabilities, optimize SIEM alerting to reduce noise and false positives, develop and maintain incident response playbooks, and strengthen email security.
Security Policies and Standards: Develop security guides and define, implement, and monitor security measures to protect Job&Talentâs systems, data, and operations.
Security Tooling and Processes: Drive the continuous improvement of security tools, processes, and standards to provide consistent security assurance across the business.
Cloud Security: Use our Cloud Security Posture Management (CSPM) tool to monitor and improve cloud security configurations across AWS, Azure, and Google Cloud Platform.
Cross-functional Collaboration: Work closely with DevOps teams to integrate security into cloud deployment environments, infrastructure, and CI/CD pipelines.
Risk Management: Perform risk assessments, threat modeling, and security reviews, ensuring risks are identified, prioritized, and addressed effectively.
Logging and Visibility: Improve logging, monitoring, visibility, and evidence collection across corporate and production systems.
Continuous Improvement: Establish best practices, identify opportunities to improve operational efficiency, and ensure the team continuously develops its technical capabilities in response to evolving threats.
5+ years of experience in SecOps, cloud security, incident response, security engineering, or a similar role.
Previous experience leading or managing a security team, including mentoring engineers, setting priorities, and coordinating workloads. Experience managing a team of a similar size is a plus.
At least 3 years of experience in threat analysis, SIEM alert investigation, detection engineering, noise reduction, and incident management.
At least 2 years of experience working with CSPM tools.
At least 3 years of experience working for a cloud-based, global technology product company.
Hands-on experience with EDR/XDR tools and endpoint investigation.
Experience with vulnerability management and risk-based prioritization.
Strong understanding of cloud security principles and experience working with AWS, Azure, and/or Google Cloud Platform.
Ability to combine hands-on technical expertise with team leadership, ensuring effective execution while supporting the development of team members.
Strong communication and collaboration skills, with the ability to work effectively with technical teams and stakeholders across the business.
About us
Job&Talent is a world-leading, AI-powered workforce management platform for frontline industries. We help companies boost productivity and efficiency at scale, while giving workers the tools they need to thrive. Our mission is simple: to empower the people who make the world go round.
Built on deep industry expertise, cutting-edge technology, and smart AI agents, our end-to-end platform covers the entire workforce lifecycle â from recruitment and planning to time and attendance, performance, cost management, and communication.
It delivers measurable improvements in the areas that matter most: fulfilment, attendance, retention, and workforce quality. Our platform strength is rooted in unique experience: placing millions of workers over the years and serving thousands of blue-chip clients across delivery, logistics, manufacturing, e-commerce, retail, and hospitality.
Headquartered in Madrid, the company operates in 10 countries across Europe, the US, and Latin America and is backed by leading investors including Atomico, Goldman Sachs, Kinnevik, BlackRock, and SoftBank.
Join our community and make an impact
Innovation, high standards, and analytical thinking are in our DNA. Everyone has a voice here, and that voice matters. Itâs how we stay sharp, move fast, and make decisions that keep us ahead of the curve.
Youâll take full ownership of your work, collaborate across borders, and grow by doing. Around here, youâll hear a lot about 10x experiences, human-centered design, and the power of AI. But what truly sets us apart is our people: Our diverse team brings unique perspectives, deep commitment and real-world experience to the table.
We champion empathy, honesty, and inclusion. Because when people can be their authentic selves, incredible things happenâfor our workers, our clients, and for each other.
And we reward that impactâwith competitive pay, meaningful benefits, and the opportunity to shape what work looks like for millions around the globe.
If youâre ready to make a real impact at scale, youâre in the right place.
Proud to champion equality
At Job&Talent we value diversity and weâre an Equal Opportunity Employer. We welcome applications from all suitably qualified people regardless of national origin, race, disability, religious beliefs or sexual orientation. Come join us. We look forward to your application.
#LI-ML2
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Builds security observability, compliance, control management systems, and defensive tools for a cloud-native organization.
Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards and designed for interoperability across any stack, Grafana Cloud brings AI to observability and observability to AI, giving teams (and their agents) unified visibility so they can see, understand, and act on all their disparate data, wherever it lives, and move at the speed of their ambitions. Customers, including Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce, rely on Grafana Labs. We are a 100% remote company with team members across 40+ countries, backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, GIC, Coatue, J.P. Morgan, CapitalG, and Lead Edge Capital. Learn more at grafana.com and follow us on LinkedIn and X.
Weâre scaling fast and staying true to what makes us different: an open-source legacy, a global collaborative culture, and a passion for meaningful work. Our team thrives in an innovation-driven environment where transparency, autonomy, and trust fuel everything we do.
You may not meet every requirement, and thatâs okay. If this role excites you, weâd love you to raise your hand for what could be a truly career-defining opportunity.
This is a remote position. We are looking for candidates in the UK, Ireland, Spain, Germany or Sweden.
We are looking for a Senior Software Engineer, Security Assurance to join our GRC engineering team. We are building a security system thatâs automated at scale, rigorously data-driven, and built from the ground up with defense-in-depth and self-healing in mind. We support a highly autonomous, remote-first, cloud-native organization. We are a technical team that can build any tool we need, while knowing when to buy to improve velocity.
To support our growth and ambitious vision, we embrace agile principles and values, share openly, apply context-driven security mechanisms, default to action, and have an OSS-first mindset. We are a 100% remote company. We believe in high-velocity but sustainable expectations and timeframes, giving people the room to do great work.
The Opportunity:
You will work to build out our security observability, compliance, and control management systems and tools. You will develop services and tools to proactively defend our systems, provide visibility to our security state, and give engineers and stakeholders guardrails and paved roads to behave securely. You will collaborate across your team, the security department, and wider Grafana to write and deploy security policies across all of our SDLC, applications, and infrastructure.
This is a very technical, hands-on keyboard software engineering, so development experience is critical. You will ideally have some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside other security engineers, full-stack developers, and customer-facing teams. Experience guiding and negotiating with peers, stakeholders, customers, and auditors is a plus.
What Youâll Be Doing:
What Makes You a Great Fit:
Bonus Points For:
In Germany, the base compensation range for this role is âŹ97,034 - âŹ116,441. Actual compensation may vary based on level, experience, and skillset as assessed throughout the interview process. All of our roles include Restricted Stock Units (RSUs), giving every team member ownership in Grafana Labsâ success. We believe in shared outcomesâRSUs help us stay aligned and invested as we scale globally.
*Compensation ranges are country specific. If you are applying for this role from a different location than listed above, your recruiter will discuss your specific marketâs defined pay range & benefits at the beginning of the process.
Why Youâll Thrive at Grafana Labs:
Equal Opportunity Employer: Grafana Labs is an equal opportunities employer. We welcome applications from everyone regardless of race, colour, nationality, origin, caste, sex, gender reassignment identity or expression, sexual orientation, age, religion or belief, disability, veteran status, genetic information, pregnancy, maternity, marital, family or carer status, or any other characteristic which is protected by local law. We believe that equality and diversity build a strong organisation, and we work hard to ensure that is the foundation of our organisation as we grow.
Grafana Labs may utilize AI tools in its recruitment process to assist in matching information provided in CVs to job postings. The recruitment team will continue to review inbound CVs manually to identify alignment with current openings.
#LI-Remote
For information about how your personal data is used once youâve applied to a job, check out our privacy policy.
Builds security assurance, observability, compliance, and control-management services and tools for a cloud-native organization.
Grafana Labs is the company behind Grafana Cloud, the fully managed observability platform trusted by more than 10,000 organizations to ensure reliability, resolve incidents faster, and optimize telemetry at scale. Built on open source and open standards and designed for interoperability across any stack, Grafana Cloud brings AI to observability and observability to AI, giving teams (and their agents) unified visibility so they can see, understand, and act on all their disparate data, wherever it lives, and move at the speed of their ambitions. Customers, including Anthropic, Bloomberg, NVIDIA, Microsoft, and Salesforce, rely on Grafana Labs. We are a 100% remote company with team members across 40+ countries, backed by leading investors including Lightspeed Venture Partners, Sequoia Capital, GIC, Coatue, J.P. Morgan, CapitalG, and Lead Edge Capital. Learn more at grafana.com and follow us on LinkedIn and X.
Weâre scaling fast and staying true to what makes us different: an open-source legacy, a global collaborative culture, and a passion for meaningful work. Our team thrives in an innovation-driven environment where transparency, autonomy, and trust fuel everything we do.
You may not meet every requirement, and thatâs okay. If this role excites you, weâd love you to raise your hand for what could be a truly career-defining opportunity.
This is a remote position. We are looking for candidates in the UK, Ireland, Spain, Germany or Sweden.
We are looking for a Senior Software Engineer, Security Assurance to join our GRC engineering team. We are building a security system thatâs automated at scale, rigorously data-driven, and built from the ground up with defense-in-depth and self-healing in mind. We support a highly autonomous, remote-first, cloud-native organization. We are a technical team that can build any tool we need, while knowing when to buy to improve velocity.
To support our growth and ambitious vision, we embrace agile principles and values, share openly, apply context-driven security mechanisms, default to action, and have an OSS-first mindset. We are a 100% remote company. We believe in high-velocity but sustainable expectations and timeframes, giving people the room to do great work.
The Opportunity:
You will work to build out our security observability, compliance, and control management systems and tools. You will develop services and tools to proactively defend our systems, provide visibility to our security state, and give engineers and stakeholders guardrails and paved roads to behave securely. You will collaborate across your team, the security department, and wider Grafana to write and deploy security policies across all of our SDLC, applications, and infrastructure.
This is a very technical, hands-on keyboard software engineering, so development experience is critical. You will ideally have some experience building, implementing and improving the maturity of security programs in Cloud-based SaaS organizations. Knowledge of security standards and frameworks (ISO, FedRAMP, PCI-DSS, GDPR, etc) is useful, but the disposition to quickly learn new things is more important than rote knowledge. You will work alongside other security engineers, full-stack developers, and customer-facing teams. Experience guiding and negotiating with peers, stakeholders, customers, and auditors is a plus.
What Youâll Be Doing:
What Makes You a Great Fit:
Bonus Points For:
In Sweden, the base compensation range for this role is SEK 775,444 - SEK 930,533. Actual compensation may vary based on level, experience, and skillset as assessed throughout the interview process. All of our roles include Restricted Stock Units (RSUs), giving every team member ownership in Grafana Labsâ success. We believe in shared outcomesâRSUs help us stay aligned and invested as we scale globally.
*Compensation ranges are country specific. If you are applying for this role from a different location than listed above, your recruiter will discuss your specific marketâs defined pay range & benefits at the beginning of the process.
Why Youâll Thrive at Grafana Labs:
Equal Opportunity Employer: Grafana Labs is an equal opportunities employer. We welcome applications from everyone regardless of race, colour, nationality, origin, caste, sex, gender reassignment identity or expression, sexual orientation, age, religion or belief, disability, veteran status, genetic information, pregnancy, maternity, marital, family or carer status, or any other characteristic which is protected by local law. We believe that equality and diversity build a strong organisation, and we work hard to ensure that is the foundation of our organisation as we grow.
Grafana Labs may utilize AI tools in its recruitment process to assist in matching information provided in CVs to job postings. The recruitment team will continue to review inbound CVs manually to identify alignment with current openings.
#LI-Remote
For information about how your personal data is used once youâve applied to a job, check out our privacy policy.
Monitors customer traffic for cyber threats, investigates incidents, tunes security policies, deploys mitigations, and communicates findings to stakeholders.
Headquarters: Australia (Remote)
Fastly helps people stay better connected with the things they love. Fastlyâs edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and securing our customersâ applications as close to their end-users as possible â at the edge of the Internet. The platform is designed to take advantage of the modern internet, to be programmable, and to support agile software development. Fastlyâs customers include many of the worldâs most prominent companies, including GitHub, Yelp, Paramount, and JetBlue.
We're building a more trustworthy Internet. Come join us.
Threat Detection Analyst - (Japanese speaking desirable)
Fastly is seeking a Threat Detection Analyst to join our dedicated Customer Security Operations Centre. In this role, you will be a frontline defender for Fastlyâs global enterprise customers. You will leverage our edge cloud platform and an array of security products in monitoring traffic, detect sophisticated anomalies, and deploy real-time mitigations against DDoS, Bot, and Web Application attacks.
This is a high-impact role where you act as a strategic partner for our Managed Security Service (MSS) clients, providing the expert visibility and rapid response necessary to address internet-scale threats.
Work Hours:
Work Location(s) & Travel Requirements
This position is a remote position based out of (locality), with the possibility of becoming a hybrid position as Fastly expands its presence in the region.
This position will require travel to the US and Internationally, as required by your role or requested by your manager.
Benefits:
We care about you. Fastly works hard to create a positive environment for our employees, and we think your life outside of work is important too. We support our teams with great benefits that start on the first day of your employment with Fastly. Curious about our offerings?
We offer a comprehensive benefits package designed to meet your needs. Our offerings may vary depending on the country where you work and are subject to change.
Â
Why Fastly?
We have a huge impact. Fastly is a small company with a big reach. Not only do our customers have a tremendous user base, but we also support a growing number of open source projects and initiatives. Outside of code, employees are encouraged to share causes close to their heart with others so we can help lend a supportive hand.
We value diversity. Growing and maintaining our inclusive and diverse team matters to us. We are committed to being a company where our employees feel comfortable bringing their authentic selves to work and have the ability to be successful -- every day.
We are passionate. Fastly is chock full of passionate people and weâre not âone size fits allâ. Fastly employs authors, pilots, skiers, parents (of humans and animals), makeup geeks, coffee connoisseurs, and more. We love employees for who they are and what they are passionate about.
Weâre always looking for humble, sharp, and creative folks to join the Fastly team. If you think you might be a fit please apply! A fully completed application and resume or CV are required when applying.
All job applications must be submitted through our official careers site at www.fastly.com/about/careers. We will never request sensitive information, such as your Social Security number, bank account or credit card information during the application process. All official communication will come from an @fastly.com or @recruiting.fastly.com email address.
Fastly is committed to ensuring equal employment opportunity and to providing employees with a safe and welcoming work environment free of discrimination and harassment. Our employment decisions are based on business needs, job requirements and individual qualifications. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, family or parental status, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances.
Consistent with the Americans with Disabilities Act (ADA) and federal or state disability laws, Fastly will provide reasonable accommodations for applicants and employees with disabilities. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact your Recruiter, or the Fastly Employee Relations team at candidateaccommodations@fastly.com or 501-287-4901.Â
Fastly collects and processes personal data submitted by job applicants in accordance with our Privacy Policy. Please see our privacy notice for job applicants.
To apply: https://weworkremotely.com/remote-jobs/fastly-threat-detection-analyst-japanese-speaking-desirable
Leads hands-on threat analysis, malware and exploit investigation, and development of production security detections and mitigations.
CloudLinux is a global remote-first company. We are driven by our principles: do the right thing, employees first, we are remote first, and we deliver high-volume, low-cost Linux infrastructure and security products that help companies to increase the efficiency of their operations. Every person on our team supports each other and does what we can to ensure we all are successful.
Check out our website for more information: cloudlinux.com
We are currently hiring a Staff Security Engineer within the Imunify360 product.
Imunify360 is CloudLinuxâs security suite for Linux web servers. It protects hundreds of thousands of hosting servers and the websites running on them, so it sees most large-scale web attacks early â often in the first hours.
Check out our website for more information: https://imunify360.com/
At Imunify360, protecting customers from evolving cyber threats requires close collaboration between security research, engineering, and other teams. Responding to complex attack campaigns involves more than identifying threats â it requires understanding attack techniques, developing effective detection and mitigation strategies, and ensuring customers are protected.
As a Staff Security Engineer, youâll take end-to-end technical ownership of complex security challenges, from initial threat discovery and analysis to detection, mitigation, and post-incident review.
This is a hands-on technical leadership role focused on practical security engineering rather than SOC monitoring, compliance, or purely theoretical research. Youâll analyze malware and exploit code, develop detection and mitigation tools, anticipate emerging attack techniques, and ensure security findings translate into production-ready detections, mitigations, and fixes.
Youâll work closely with engineering, security research, support, external partners, and the broader security community to coordinate responses and drive continuous improvements in our security capabilities.
As an individual contributor, you wonât have direct reports or people management responsibilities. All security research and testing are conducted within authorized boundaries, with clearly defined scope and responsible disclosure practices.
Your mission is to strengthen Imunify360âs ability to detect, prevent, and respond to emerging threats, delivering measurable security improvements that protect customers at scale.
Malware and campaign mitigation
Security response coordination
Offensive security on our own product
Detection engineering and tooling
People multiplier (no direct reports)
Background in hosting or large web ecosystems.
Detection authoring at scale (signatures, WAF/IDS rules).
Kernel-level monitoring and rootkit detection.
Threat intelligence practice and actor tracking.
ML for malware classification.
Public track record: CVEs, published research, talks, CTFs, open-source security tools.
Relevant certifications are a plus, not a requirement.
Whatâs in it for you?
By applying for this position, you consent to the processing of your personal data as described in our Privacy Policy ( https://cloudlinux.com/candidate-privacy-notice ), which provides detailed information on how we maintain and handle your data.
Supports security compliance, audit evidence collection, vulnerability reporting, phishing simulations, penetration testing, and GRC workflow automation.
About OpenSesame
OpenSesame is transforming workforce development with an AI-powered marketplace of skill-building courses and learning pathways. We help organizations build skills and stay compliant through a high-quality content catalog, seamless LMS/LXP integrations, and advanced capabilities like skills-based curation and multilingual content creation. More than 2,000 companies, including 150+ of the Global 2000, rely on OpenSesame to develop the worldâs most productive and admired workforces.
Learn more:Â www.opensesame.com/about
Internship Overview
OpenSesame seeks passionate, driven students to join us for a paid summer internship program. Suppose youâre intelligent, curious, and full of fresh ideas. In that case, this is your chance to collaborate with an exceptional team and gain hands-on experience in a fast-paced, growth-focused environment.
As a Security Analyst Intern, youâll work on real-world compliance and security challenges, contribute to impactful solutions, and collaborate with teams across OpenSesame to strengthen our security and compliance posture.
About the Security and Compliance Team
At OpenSesame, our Security and Compliance Team ensures our company meets the highest industry standards and regulatory requirements. We focus on compliance with ISO 27001, SOC 2, GDPR, ISO 42001 and other security frameworks, vendor risk assessments, incident response, and policy enforcement.
Our team partners across departments to mitigate risks, respond to security threats, and maintain a strong security culture. Through continuous learning and innovation, we protect the organization and help drive secure business growth.
Performance Objectives
Additional Program Details
Eligibility:
Application Closes:
Program Dates:
Commitment:
Compensation:
Fully Remote Role: Interns must have access to a reliable, high-speed internet connection during working hours. OpenSesame will provide a company laptop for use throughout the internship, which must be returned at the conclusion of the internship.
Ready to make an impact? Apply now and bring your creativity, energy, and problem-solving skills to OpenSesame. Weâre excited to see what youâll bring to the table!
We use AI. For real. Every team at OpenSesame works with AI tools daily, not as a buzzword, but as practice. Youâll build fluency that most companies are still talking about adopting, with hands-on training and clear guardrails to experiment responsibly. AI amplifies your creativity and judgment. It doesnât replace them. The skills you build here travel with you.
Location: This position can be based anywhere in the U.S.
Equal Employment Opportunity: OpenSesame is an Equal Employment Opportunity and Affirmative Action employer that values and welcomes diversity. We do not discriminate on the basis of various legally protected characteristics, including criminal history, and strive to provide reasonable accommodations to qualified individuals with disabilities. We prioritize safety and security and may use your information accordingly, and you can contact us for assistance or accommodations during the job application process.
CPRA (California Candidates): When you submit your application, OpenSesame may collect and use your personal information in accordance with our privacy policy and the CPRA. This may include personal details and employment history, and will only be used for employment-related purposes. We may share this information with third-party service providers, but we will not sell it to third parties. If you have any questions or concerns, please contact us, and for more information on your rights under the CPRA, refer to our privacy policy or the California Attorney Generalâs website.
We Care About Your Security:Â Weâve been made aware of a phishing scam involving individuals impersonating OpenSesame recruiters. All legitimate communication from our team will come from @opensesame.com email addresses. If you receive a suspicious message, please contact us directly at careers@opensesame.com. Your security matters to us, thank you for staying vigilant.
